Amazon Q and SSL Interception not working in VSCode
- Dominant language
- TypeScript
- Stars
- 2k
- Forks
- 807
- Avg merge
- 10h 12m
- Merged PRs (30d)
- 7
Description
## Problem
Hello,
I opened the exact same issue for IntelliJ last year and it seems that we have the same problem with VSCode.
I am trying to use Amazon Q in VSCode but it is not working with our SSL Interception activated.
My entreprise uses ZScaler and the root certificate is in my computer trust store but Q still get an error when I prompt it :

I try to change some settings in my VSCode like :
```
- http.proxyStrictSSL: false
- http.proxySupport: off
- http.experimental.systemCertificatesV2: true
- http.systemCertificates: (already true)
```
None of them change the problem.
It seems that Q uses it's own internal cert store.
## Steps to reproduce the issue
- Need : VSCode and Q extension
- Launch the interception soft (Zscaler for me)
- Try to query Amazon Q
## Expected behavior
Q should use the system certificate store.
## System details (run `AWS: About` and/or `Amazon Q: About`)
- OS: Windows 10 up to date
- Visual Studio Code version: 1.100.2
- AWS Toolkit version: 3.63
- Amazon Q version: 1.70
Contributor guide
Research direction
Reproduce the issue with Windows 10, VSCode 1.100.2, AWS Toolkit 3.63, Amazon Q 1.70, and ZScaler SSL interception, using the listed certificate and proxy settings. Investigate how Amazon Q handles certificates and verify that prompts work with the system trust store; no repository files or tests are named in the issue.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, vscode
- Domain
- devtools, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100